Migrating opensource chef11 servers


#1

So it seems I’ve been asked to migrate my chef11 server from one hosting company to another.

Any good suggestions/ideas/gotchas/tutorials to do this? I’d really like not to have to have every client.pem have to be recreated and re-check in.

Thanks in advance!

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.com | c: 512.619.0722 | o: 512.977.5876


#2

Tim Smith - Systems Engineer
+1 707 738 8132

On Feb 20, 2014, at 11:55 AM, JJ Asghar jj.asghar@peopleadmin.com wrote:

So it seems I’ve been asked to migrate my chef11 server from one hosting company to another.

Any good suggestions/ideas/gotchas/tutorials to do this? I’d really like not to have to have every client.pem have to be recreated and re-check in.

Thanks in advance!

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.com | c: 512.619.0722 | o: 512.977.5876


#3

This should be sufficient:

  1. Point all your chef-clients at the (empty) new server
  2. “knife download /” from your old server
  3. “knife upload /” to your new server

On Thu, Feb 20, 2014 at 11:55 AM, JJ Asghar jj.asghar@peopleadmin.comwrote:

So it seems I’ve been asked to migrate my chef11 server from one hosting
company to another.

Any good suggestions/ideas/gotchas/tutorials to do this? I’d really
like not to have to have every client.pem have to be recreated and re-check
in.

Thanks in advance!

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.com | c: 512.619.0722 | o: 512.977.5876


#4

(You will need to add “versioned_cookbooks true” to your knife.rb for this
to work.)

On Thu, Feb 20, 2014 at 12:01 PM, John Keiser jkeiser@getchef.com wrote:

This should be sufficient:

  1. Point all your chef-clients at the (empty) new server
  2. “knife download /” from your old server
  3. “knife upload /” to your new server

On Thu, Feb 20, 2014 at 11:55 AM, JJ Asghar jj.asghar@peopleadmin.comwrote:

So it seems I’ve been asked to migrate my chef11 server from one
hosting company to another.

Any good suggestions/ideas/gotchas/tutorials to do this? I’d really
like not to have to have every client.pem have to be recreated and re-check
in.

Thanks in advance!

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.com | c: 512.619.0722 | o: 512.977.5876


#5

That covers the client/node pems too?

If so that’s bad ass.

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.com | c: 512.619.0722 | o: 512.977.5876

From: John Keiser <jkeiser@getchef.commailto:jkeiser@getchef.com>
Reply-To: "chef@lists.opscode.commailto:chef@lists.opscode.com" <chef@lists.opscode.commailto:chef@lists.opscode.com>
Date: Thursday, February 20, 2014 at 2:01 PM
To: "chef@lists.opscode.commailto:chef@lists.opscode.com" <chef@lists.opscode.commailto:chef@lists.opscode.com>
Subject: [chef] Re: Migrating opensource chef11 servers.

(You will need to add “versioned_cookbooks true” to your knife.rb for this to work.)

On Thu, Feb 20, 2014 at 12:01 PM, John Keiser <jkeiser@getchef.commailto:jkeiser@getchef.com> wrote:
This should be sufficient:

  1. Point all your chef-clients at the (empty) new server
  2. “knife download /” from your old server
  3. “knife upload /” to your new server

On Thu, Feb 20, 2014 at 11:55 AM, JJ Asghar <jj.asghar@peopleadmin.commailto:jj.asghar@peopleadmin.com> wrote:

So it seems I’ve been asked to migrate my chef11 server from one hosting company to another.

Any good suggestions/ideas/gotchas/tutorials to do this? I’d really like not to have to have every client.pem have to be recreated and re-check in.

Thanks in advance!

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.commailto:jj.asghar@peopleadmin.com | c: 512.619.0722tel:512.619.0722 | o: 512.977.5876tel:512.977.5876


#6

Yep! It saves and restores the public key for all clients. The actual
.pem files are private keys, and just stay on the client.

On Thu, Feb 20, 2014 at 12:41 PM, JJ Asghar jj.asghar@peopleadmin.comwrote:

That covers the client/node pems too?

If so that’s bad ass.

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.com | c: 512.619.0722 | o: 512.977.5876

From: John Keiser jkeiser@getchef.com
Reply-To: "chef@lists.opscode.com" chef@lists.opscode.com
Date: Thursday, February 20, 2014 at 2:01 PM
To: "chef@lists.opscode.com" chef@lists.opscode.com
Subject: [chef] Re: Migrating opensource chef11 servers.

(You will need to add “versioned_cookbooks true” to your knife.rb for
this to work.)

On Thu, Feb 20, 2014 at 12:01 PM, John Keiser jkeiser@getchef.com wrote:

This should be sufficient:

  1. Point all your chef-clients at the (empty) new server
  2. “knife download /” from your old server
  3. “knife upload /” to your new server

On Thu, Feb 20, 2014 at 11:55 AM, JJ Asghar jj.asghar@peopleadmin.comwrote:

So it seems I’ve been asked to migrate my chef11 server from one
hosting company to another.

Any good suggestions/ideas/gotchas/tutorials to do this? I’d really
like not to have to have every client.pem have to be recreated and re-check
in.

Thanks in advance!

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.com | c: 512.619.0722 | o: 512.977.5876


#7

yeah :0) .
btw whats nodes perm? every node has its own client,

On Thu, Feb 20, 2014 at 12:41 PM, JJ Asghar jj.asghar@peopleadmin.comwrote:

That covers the client/node pems too?

If so that’s bad ass.

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.com | c: 512.619.0722 | o: 512.977.5876

From: John Keiser jkeiser@getchef.com
Reply-To: "chef@lists.opscode.com" chef@lists.opscode.com
Date: Thursday, February 20, 2014 at 2:01 PM
To: "chef@lists.opscode.com" chef@lists.opscode.com
Subject: [chef] Re: Migrating opensource chef11 servers.

(You will need to add “versioned_cookbooks true” to your knife.rb for
this to work.)

On Thu, Feb 20, 2014 at 12:01 PM, John Keiser jkeiser@getchef.com wrote:

This should be sufficient:

  1. Point all your chef-clients at the (empty) new server
  2. “knife download /” from your old server
  3. “knife upload /” to your new server

On Thu, Feb 20, 2014 at 11:55 AM, JJ Asghar jj.asghar@peopleadmin.comwrote:

So it seems I’ve been asked to migrate my chef11 server from one
hosting company to another.

Any good suggestions/ideas/gotchas/tutorials to do this? I’d really
like not to have to have every client.pem have to be recreated and re-check
in.

Thanks in advance!

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.com | c: 512.619.0722 | o: 512.977.5876


#8

You may have to set the client/node permissions if going from Open Source
Chef to Enterprise Chef since the permissions may not exist in Open Source.

Here is a small ruby gist that will set the client/node permissions.

On Thu, Feb 20, 2014 at 1:07 PM, Ranjib Dey dey.ranjib@gmail.com wrote:

yeah :0) .
btw whats nodes perm? every node has its own client,

On Thu, Feb 20, 2014 at 12:41 PM, JJ Asghar jj.asghar@peopleadmin.comwrote:

That covers the client/node pems too?

If so that’s bad ass.

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.com | c: 512.619.0722 | o: 512.977.5876

From: John Keiser jkeiser@getchef.com
Reply-To: "chef@lists.opscode.com" chef@lists.opscode.com
Date: Thursday, February 20, 2014 at 2:01 PM
To: "chef@lists.opscode.com" chef@lists.opscode.com
Subject: [chef] Re: Migrating opensource chef11 servers.

(You will need to add “versioned_cookbooks true” to your knife.rb for
this to work.)

On Thu, Feb 20, 2014 at 12:01 PM, John Keiser jkeiser@getchef.comwrote:

This should be sufficient:

  1. Point all your chef-clients at the (empty) new server
  2. “knife download /” from your old server
  3. “knife upload /” to your new server

On Thu, Feb 20, 2014 at 11:55 AM, JJ Asghar jj.asghar@peopleadmin.comwrote:

So it seems I’ve been asked to migrate my chef11 server from one
hosting company to another.

Any good suggestions/ideas/gotchas/tutorials to do this? I’d really
like not to have to have every client.pem have to be recreated and re-check
in.

Thanks in advance!

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.com | c: 512.619.0722 | o: 512.977.5876

Stephen Lauck

Consultant

415.269.3687 - lauck@opscode.com - *my:
*Linkedinhttp://www.linkedin.com/pub/stephen-lauck/50/954/26a/
Twitter https://twitter.com/stephenlauck

CHEF

GETCHEF.COM http://www.getchef.com

TM

getchef.com http://www.getchef.com Blog http://www.opscode.com/blog/
Facebook https://www.facebook.com/getchefdotcom
Twitterhttps://twitter.com/getchefdotcom
Youtube https://www.youtube.com/getchef

Meet me at #ChefConf 2014 http://chefconf.com/


#9

Jeebus that’s awesome. Thanks guys!

You just made my weekend. :slight_smile:

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.com | c: 512.619.0722 | o: 512.977.5876

From: John Keiser <jkeiser@getchef.commailto:jkeiser@getchef.com>
Reply-To: "chef@lists.opscode.commailto:chef@lists.opscode.com" <chef@lists.opscode.commailto:chef@lists.opscode.com>
Date: Thursday, February 20, 2014 at 2:59 PM
To: "chef@lists.opscode.commailto:chef@lists.opscode.com" <chef@lists.opscode.commailto:chef@lists.opscode.com>
Subject: [chef] Re: Re: Re: Migrating opensource chef11 servers.

Yep! It saves and restores the public key for all clients. The actual .pem files are private keys, and just stay on the client.

On Thu, Feb 20, 2014 at 12:41 PM, JJ Asghar <jj.asghar@peopleadmin.commailto:jj.asghar@peopleadmin.com> wrote:
That covers the client/node pems too?

If so that’s bad ass.

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.commailto:jj.asghar@peopleadmin.com | c: 512.619.0722tel:512.619.0722 | o: 512.977.5876tel:512.977.5876

From: John Keiser <jkeiser@getchef.commailto:jkeiser@getchef.com>
Reply-To: "chef@lists.opscode.commailto:chef@lists.opscode.com" <chef@lists.opscode.commailto:chef@lists.opscode.com>
Date: Thursday, February 20, 2014 at 2:01 PM
To: "chef@lists.opscode.commailto:chef@lists.opscode.com" <chef@lists.opscode.commailto:chef@lists.opscode.com>
Subject: [chef] Re: Migrating opensource chef11 servers.

(You will need to add “versioned_cookbooks true” to your knife.rb for this to work.)

On Thu, Feb 20, 2014 at 12:01 PM, John Keiser <jkeiser@getchef.commailto:jkeiser@getchef.com> wrote:
This should be sufficient:

  1. Point all your chef-clients at the (empty) new server
  2. “knife download /” from your old server
  3. “knife upload /” to your new server

On Thu, Feb 20, 2014 at 11:55 AM, JJ Asghar <jj.asghar@peopleadmin.commailto:jj.asghar@peopleadmin.com> wrote:

So it seems I’ve been asked to migrate my chef11 server from one hosting company to another.

Any good suggestions/ideas/gotchas/tutorials to do this? I’d really like not to have to have every client.pem have to be recreated and re-check in.

Thanks in advance!

Best Regards,
JJ Asghar
e: jj.asghar@peopleadmin.commailto:jj.asghar@peopleadmin.com | c: 512.619.0722tel:512.619.0722 | o: 512.977.5876tel:512.977.5876